reflet-sdk 0.7.1 → 0.7.2

package/CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to `reflet-sdk` will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.7.2] - 2026-10-13
+
+### Fixed
+
+- Team tools: Sign in with Reflet failed on every app that sends `Cross-Origin-Opener-Policy: same-origin` (a common security header, Helmet's default), reporting "Sign-in was cancelled." a second after the popup opened. With `same-origin-allow-popups` it still failed in Safari. Sign-in now moves the tab to reflet.app and back to the same page instead of using a popup, so it works whatever that header says, and pop-up blockers no longer get in the way.
+
 ## [0.7.1] - 2026-10-13
 
 ### Fixed

package/README.md

@@ -274,9 +274,11 @@ forwards the feedback and session endpoints the devtools use.
 
 Members of your Reflet organization can record sessions on your deployed app
 too; your users never see it. Open any page with `?reflet-team` once, click
-**Sign in with Reflet**, and approve the app in the popup. The browser keeps a
-token for that origin for 7 days; revoke it from Account → Team tools in your
-apps on reflet.app.
+**Sign in with Reflet**, and approve the app on reflet.app: the tab comes back
+to the same page, signed in. Sign-in needs no popup, so it works whatever
+`Cross-Origin-Opener-Policy` your app sends. The browser keeps a token for that
+origin for 7 days; revoke it from Account → Team tools in your apps on
+reflet.app.
 
 Two things on your side:
 

package/dist/{devtools-layer-BI_hut0i.js → devtools-layer-DhQE3leI.js}

@@ -1,6 +1,6 @@
-import { $ as shortenSourcePath, G as describeElement, Q as resolveComponentStack, R as DEFAULT_WIDGET_LABELS, U as buildElementSelection, V as collectPageContext, X as getFiberFromNode, a as uploadBlob, f as listenOnPageAndWidget, g as isSubmitEnter, it as releaseCapture, nt as capturedFromCanvas, o as ElementPicker, p as listenToKeydown, r as deriveTitle, rt as capturedViewportSize, s as isWidgetOwned, tt as captureViewport, z as SDK_VERSION } from "./submit-DBy9TCSq.js";
+import { $ as shortenSourcePath, G as describeElement, Q as resolveComponentStack, R as DEFAULT_WIDGET_LABELS, U as buildElementSelection, V as collectPageContext, X as getFiberFromNode, a as uploadBlob, f as listenOnPageAndWidget, g as isSubmitEnter, it as releaseCapture, nt as capturedFromCanvas, o as ElementPicker, p as listenToKeydown, r as deriveTitle, rt as capturedViewportSize, s as isWidgetOwned, tt as captureViewport, z as SDK_VERSION } from "./submit-Dx892JVJ.js";
 import { t as SelectionOutline } from "./selection-outline-NzAAAZXR.js";
-import { A as Notices, C as searchCode, D as openDatabase, E as describeStorageFailure, M as reportFailure, O as settle, S as probeDevRoute, T as committed, a as DevtoolsBar, b as fetchBoardFeedback, c as copyToClipboard, f as SessionWorkspaceProvider, g as devtoolsTransport, j as announce, l as SESSIONS_STYLES, m as useWorkspaceLoader, n as DEVTOOLS_STYLES, o as DevtoolsBarButtons, r as DevtoolsSheet, t as SessionsPanel, u as RecordingLayer, v as callReflet, w as startBoardConnect, x as fetchSourceFile, y as disconnectBoard } from "./sessions-panel-CDrnOEwi.js";
+import { A as Notices, C as searchCode, D as openDatabase, E as describeStorageFailure, M as reportFailure, O as settle, S as probeDevRoute, T as committed, a as DevtoolsBar, b as fetchBoardFeedback, c as copyToClipboard, f as SessionWorkspaceProvider, g as devtoolsTransport, j as announce, l as SESSIONS_STYLES, m as useWorkspaceLoader, n as DEVTOOLS_STYLES, o as DevtoolsBarButtons, r as DevtoolsSheet, t as SessionsPanel, u as RecordingLayer, v as callReflet, w as startBoardConnect, x as fetchSourceFile, y as disconnectBoard } from "./sessions-panel-BycJng5z.js";
 import * as G$1 from "react";
 import { useCallback, useEffect, useLayoutEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
@@ -3692,4 +3692,4 @@ function DevtoolsLayer({ isWidgetOpen, position, publicKey }) {
 //#endregion
 export { DevtoolsLayer };
 
-//# sourceMappingURL=devtools-layer-BI_hut0i.js.map
+//# sourceMappingURL=devtools-layer-DhQE3leI.js.map